Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199415.roa
File: AS199415.roa (raw, json)
Hash identifier: flAR8Jy59uoXLKSlQ5dfxMg/3zmDnCa3ePAN9aA57Fs=
Subject key identifier: 9F:3F:CE:36:1E:97:33:37:0B:E2:2B:41:98:7F:1B:47:F0:87:45:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7926028FBE6984DCDB3F2E3291DBB53B2259B5E1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199415.roa
Signing time: Wed 16 Sep 2026 13:23:04 +0000
ROA not before: Wed 16 Sep 2026 13:18:04 +0000
ROA not after: Wed 15 Sep 2027 13:23:04 +0000
asID: 199415
IP address blocks: 145.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:26:02:8f:be:69:84:dc:db:3f:2e:32:91:db:b5:3b:22:59:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 16 13:18:04 2026 GMT
Not After : Sep 15 13:23:04 2027 GMT
Subject: CN=9F3FCE361E9733370BE22B41987F1B47F0874580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:ce:82:df:fb:23:55:58:c1:2d:a3:22:d4:
22:2b:af:95:f6:bc:26:44:c2:c8:da:1c:6e:d8:c4:
f6:39:45:ff:86:1b:85:3b:7e:36:6c:44:25:6d:ec:
a6:04:f1:1c:bd:28:2f:12:ee:c1:f9:e5:b4:23:5c:
20:a1:51:b1:15:26:af:46:fc:67:07:78:0b:ca:94:
8b:ec:05:64:c5:81:88:2b:5f:b4:5e:56:d4:08:c5:
d0:b8:c3:43:d4:16:22:ea:87:77:fe:86:ce:1f:0a:
0e:39:da:02:0a:f7:84:ba:c3:3d:32:89:81:9b:e0:
14:78:38:de:8e:5c:44:a7:b3:70:9f:30:00:f4:6a:
b4:3e:ce:1b:a8:b0:90:02:44:6f:af:43:bf:d2:e1:
66:49:de:5c:0c:61:da:33:35:df:78:e3:6c:34:ab:
f7:3e:47:9e:bd:41:55:c1:90:dd:6c:23:2b:f0:78:
98:a3:1d:17:3a:df:6b:06:04:5f:ca:c9:d4:11:53:
2a:bb:80:90:41:dd:c7:8b:0c:57:b9:0e:2c:ce:36:
96:f8:f3:c2:c1:e9:4a:ae:f7:2c:9e:52:40:2f:60:
8a:8a:f7:01:4b:bd:28:a2:4a:3c:09:a0:66:1d:54:
af:d9:77:a2:56:fd:ef:67:d1:67:7b:d5:54:78:b2:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:CE:36:1E:97:33:37:0B:E2:2B:41:98:7F:1B:47:F0:87:45:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6d:d5:80:48:79:47:61:5d:36:67:a4:0a:94:58:7a:0f:55:
ce:e1:39:cf:d6:dd:6d:05:a2:d2:af:9e:d6:ec:9f:50:81:a5:
21:8a:f3:6b:d4:a8:b5:3b:d4:9f:f1:b6:4d:06:8b:7b:ba:dd:
6f:48:21:07:4e:30:a7:8b:29:77:3d:fc:c8:fd:a5:53:73:63:
32:f5:b6:9a:3b:90:f1:e6:f9:3c:d4:52:74:9b:7e:71:fc:36:
1a:46:91:4e:02:23:ef:52:86:4c:4f:78:b0:b1:85:ac:2c:3b:
1c:1f:3a:27:38:fe:a4:2e:a9:c0:72:ab:91:4f:ba:cc:9c:e1:
f5:b7:f5:2f:c3:f9:bb:3b:97:88:51:7a:ef:e8:3a:75:08:0f:
7c:b7:ae:b6:84:ad:66:76:94:d4:5c:0f:0d:d1:33:71:71:fd:
d9:c1:9e:41:4e:84:82:42:bf:f0:ba:88:c9:78:2c:73:c2:2a:
91:39:96:0f:4f:69:72:98:21:6a:54:2a:d3:9a:75:83:51:e9:
b1:a4:83:33:42:8e:f7:69:43:f7:fa:c4:ef:49:82:90:f3:ee:
0a:a7:d0:f1:5b:db:67:76:1d:ba:99:b6:a8:16:59:31:50:01:
b0:08:94:f5:75:3c:60:4c:40:88:09:b9:24:1d:ad:09:c2:94:
19:84:2d:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeSYCj75phNzbPy4ykdu1OyJZteEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MTYxMzE4MDRaFw0yNzA5MTUxMzIzMDRaMDMxMTAvBgNV
BAMTKDlGM0ZDRTM2MUU5NzMzMzcwQkUyMkI0MTk4N0YxQjQ3RjA4NzQ1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ic6C3/sjVVjBLaMi1CIrr5X2
vCZEwsjaHG7YxPY5Rf+GG4U7fjZsRCVt7KYE8Ry9KC8S7sH55bQjXCChUbEVJq9G
/GcHeAvKlIvsBWTFgYgrX7ReVtQIxdC4w0PUFiLqh3f+hs4fCg452gIK94S6wz0y
iYGb4BR4ON6OXESns3CfMAD0arQ+zhuosJACRG+vQ7/S4WZJ3lwMYdozNd9442w0
q/c+R569QVXBkN1sIyvweJijHRc632sGBF/KydQRUyq7gJBB3ceLDFe5DizONpb4
88LB6Uqu9yyeUkAvYIqK9wFLvSiiSjwJoGYdVK/Zd6JW/e9n0Wd71VR4sqvjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUnz/ONh6XMzcL4itBmH8bR/CHRYAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5NDE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkd8E
MA0GCSqGSIb3DQEBCwUAA4IBAQBDbdWASHlHYV02Z6QKlFh6D1XO4TnP1t1tBaLS
r57W7J9QgaUhivNr1Ki1O9Sf8bZNBot7ut1vSCEHTjCniyl3PfzI/aVTc2My9baa
O5Dx5vk81FJ0m35x/DYaRpFOAiPvUoZMT3iwsYWsLDscHzonOP6kLqnAcquRT7rM
nOH1t/Uvw/m7O5eIUXrv6Dp1CA98t662hK1mdpTUXA8N0TNxcf3ZwZ5BToSCQr/w
uojJeCxzwiqROZYPT2lymCFqVCrTmnWDUemxpIMzQo73aUP3+sTvSYKQ8+4Kp9Dx
W9tndh26mbaoFlkxUAGwCJT1dTxgTECICbkkHa0JwpQZhC14
-----END CERTIFICATE-----
Generated at Sat Sep 19 05:37:32 2026 by rpki-client